$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8698cf1c-6f2f-49f6-9a90-ce88a83b6f37.cer File: 8698cf1c-6f2f-49f6-9a90-ce88a83b6f37.cer (raw, json) Hash identifier: 7av9KXLd3tGVt/4JGZktRoCpCFMI3T72dXqycjfKCrQ= Subject key identifier: A9:D4:C6:F9:E8:F9:E4:DB:86:27:DE:A3:E6:31:8B:49:AD:75:EC:EA Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584AB550DA24E93C1ADAAEC8E980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8698cf1c-6f2f-49f6-9a90-ce88a83b6f37/8698cf1c-6f2f-49f6-9a90-ce88a83b6f37.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8698cf1c-6f2f-49f6-9a90-ce88a83b6f37/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 01 Aug 2025 04:24:59 +0000 Certificate not after: Thu 04 Nov 2027 04:24:59 +0000 Subordinate resources: IP: 23.142.252.0/24 IP: 2602:f5b6::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b5:50:da:24:e9:3c:1a:da:ae:c8:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 1 04:24:59 2025 GMT Not After : Nov 4 04:24:59 2027 GMT Subject: CN=8698cf1c-6f2f-49f6-9a90-ce88a83b6f37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:cd:89:67:53:9e:02:bb:47:61:6c:4b:3e:6d: 92:50:55:e2:98:67:9e:ee:3e:8c:68:db:9a:31:e9: 76:10:25:0e:b7:0f:8a:b8:21:79:99:d1:ae:43:10: 7a:6d:91:79:32:f1:ce:eb:82:ae:93:04:2b:6e:fe: d8:d1:5b:49:e1:d8:db:35:62:3a:d6:3c:42:45:b5: bf:46:31:d3:49:f9:ee:4b:5d:22:29:cb:95:bc:32: 83:c7:d1:f0:bc:5d:e5:62:33:ed:96:75:f1:6e:d0: 4f:20:2b:43:3d:56:1d:cd:f5:2a:b9:4a:de:c9:97: 5b:a5:d4:e4:73:89:21:d1:12:9c:09:0c:fe:9d:d9: ea:70:7d:95:aa:83:f2:87:27:99:b1:81:b8:6b:87: d4:f3:50:3b:e2:65:03:88:b1:4d:e8:8b:d8:ad:51: 35:57:64:c0:fc:91:96:40:ef:90:b0:53:ff:b8:f7: 27:c7:16:8c:4e:04:81:92:0b:44:d1:18:44:b8:4c: 93:e8:5e:ae:ff:54:39:0f:99:a4:4d:e7:d7:a7:16: 14:60:ef:3b:c8:fa:ce:f3:52:9d:f3:c3:fc:53:99: 67:0a:37:51:0c:c7:b4:d0:1c:e1:c6:d2:16:c8:b4: b3:f6:5b:9a:b5:9b:4a:45:3f:69:cd:ed:17:f9:e3: 50:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D4:C6:F9:E8:F9:E4:DB:86:27:DE:A3:E6:31:8B:49:AD:75:EC:EA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8698cf1c-6f2f-49f6-9a90-ce88a83b6f37/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8698cf1c-6f2f-49f6-9a90-ce88a83b6f37/8698cf1c-6f2f-49f6-9a90-ce88a83b6f37.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.142.252.0/24 IPv6: 2602:f5b6::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:d6:e2:36:88:54:f3:2b:c2:99:89:6f:fa:2c:ef:f1:a1:37: fd:27:c9:22:fc:af:fb:df:52:28:4f:4b:71:b2:93:ad:2f:f0: da:7e:10:bd:80:f7:c4:97:78:b3:e6:62:2e:89:93:5f:3b:fe: e8:99:9f:b5:90:9c:47:4f:f8:5b:18:7f:03:85:be:1d:d3:ed: a9:5b:43:72:ee:42:66:ee:63:5d:5d:a2:6d:91:ab:a7:68:20: 63:fb:1b:80:36:2b:c8:e4:6d:4f:62:ec:29:8b:70:bd:12:66: d9:a1:d6:c1:9f:3a:fd:5c:0c:97:9d:0a:53:75:b5:30:9d:44: 20:39:e1:88:86:73:08:5d:6d:08:93:cb:55:30:dc:31:3c:c6: f2:5c:50:ee:b5:87:be:cc:13:f7:b5:b7:9d:04:3a:d9:46:6a: cb:5e:6a:1e:7f:d0:e1:8f:60:6f:23:6a:76:8c:6a:d6:b9:5a: 5d:ea:7e:dc:73:be:39:34:64:05:36:dd:4c:bd:7f:15:b1:29: c8:9e:4c:3d:a6:75:7f:94:91:70:67:34:76:e8:be:7b:78:de: b3:5a:4a:16:48:e1:63:fc:06:5f:85:02:78:38:87:f3:97:3e: 68:d7:3a:78:0a:49:d9:60:2f:5f:d8:2f:03:73:e7:c0:97:13: ba:7d:50:35 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEq1UNok6Twa2q7I6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgwMTA0MjQ1OVoXDTI3MTEwNDA0MjQ1OVowLzEtMCsGA1UEAxMk ODY5OGNmMWMtNmYyZi00OWY2LTlhOTAtY2U4OGE4M2I2ZjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm82JZ1OeArtHYWxLPm2SUFXimGee7j6MaNua Mel2ECUOtw+KuCF5mdGuQxB6bZF5MvHO64KukwQrbv7Y0VtJ4djbNWI61jxCRbW/ RjHTSfnuS10iKcuVvDKDx9HwvF3lYjPtlnXxbtBPICtDPVYdzfUquUreyZdbpdTk c4kh0RKcCQz+ndnqcH2VqoPyhyeZsYG4a4fU81A74mUDiLFN6IvYrVE1V2TA/JGW QO+QsFP/uPcnxxaMTgSBkgtE0RhEuEyT6F6u/1Q5D5mkTefXpxYUYO87yPrO81Kd 88P8U5lnCjdRDMe00BzhxtIWyLSz9luatZtKRT9pze0X+eNQGwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFKnUxvno+eTbhifeo+Yxi0mtdezqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84 Njk4Y2YxYy02ZjJmLTQ5ZjYtOWE5MC1jZTg4YTgzYjZmMzcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4Lzg2OThjZjFjLTZmMmYtNDlmNi05 YTkwLWNlODhhODNiNmYzNy84Njk4Y2YxYy02ZjJmLTQ5ZjYtOWE5MC1jZTg4YTgz YjZmMzcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXjvwwDgQCAAIwCAMGACYC9bYAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ACXW4jaIVPMrwpmJb/os7/GhN/0nySL8r/vfUihPS3Gyk60v8Np+EL2A98SXeLPm Yi6Jk187/uiZn7WQnEdP+FsYfwOFvh3T7albQ3LuQmbuY11dom2Rq6doIGP7G4A2 K8jkbU9i7CmLcL0SZtmh1sGfOv1cDJedClN1tTCdRCA54YiGcwhdbQiTy1Uw3DE8 xvJcUO61h77ME/e1t50EOtlGasteah5/0OGPYG8janaMata5Wl3qftxzvjk0ZAU2 3Uy9fxWxKcieTD2mdX+UkXBnNHbovnt43rNaShZI4WP8Bl+FAng4h/OXPmjXOngK SdlgL1/YLwNz58CXE7p9UDU= -----END CERTIFICATE-----Generated at Tue Nov 4 19:57:55 2025 by rpki-client